TestOut Domain 6 Security (Random)

As a systems administrator, you've received a Help ticket from an employee who wants to reset their password for the company's intranet site. Security policy requires that you confirm the employee's identity through a telephone call.

Which type of security information could help you confirm the employee's identity over the phone?

• Software token

• Biometrics

• MAC address

• Personally identifiable information (PII)

Which of the following components of a successful access control framework is the process of proving that you are who you say you are?

• Authorization

• Accounting

• Access control

• Authentication

A technician walks into the office with a UPS. What sort of threat will this device prepare a system for?

• Denial-of-service

• Power outage

• Data redundancy

• Wiretapping

Which of the following are common risks of using social media? (Select two.)

• Personal information can be used without your permission

• You can be added to a group without your permission.

• Privacy settings are virtually non-existent.

• Online information that you post is difficult to remove.

• Anonymity can lead some people to post harmful comments.

Which of the following do cybercriminals frequently use to alter or compromise data integrity?

• Malware attack

• On-path attack

• Replay attack

• TCP session hijacking

Which of the following are examples of Type 1 (something you know) identification? (Select two.)

• Software tokens

• Single-use passwords

• Personally identifiable information (PII)

• Hardware tokens

• Voice recognition

You are using your smartphone at work during a break to send personal email and social network messages. You are using the company-provided Wi-Fi to connect to the internet.

Which of the following is the level of privacy you can expect from your company when you send private communications through the company network?

• Private emails and messages are filtered so that only business-related personnel communications are stored and monitored.

• Private emails and messages may be stored and monitored.

• Private emails and messages are stored but deleted on a regular basis.

• Private emails and messages are ignored by the company.

A systems engineer is part of a company team creating a business continuity plan to recover critical data in case of a natural disaster.

Which of the following fault tolerance methods should the team include in the plan to be able to recover data? (Select two.)

• Power redundancy

• Data Center

• Site redundancy

• Redundant Array of Independent Disks (RAID)

• Replication

Ted, an employee in the Sales department has asked a coworker, Ann, in the Production department to update the product descriptions contained in a Sales document. Ann can open the file but, after making changes, can't save the file.

Which of the following digital security methods is MOST likely preventing this?

• Multifactor authentication

• Directory permission

• Data loss prevention

• Antivirus software

When resetting a password for a website, which of the following are the MOST likely security identification requirements that you need to meet before the password can be changed? (Select two.)

• Enter the new password twice.

• Add the password to a password manager.

• Answer a security question.

• Meet the password complexity requirements.

• Enter a security code.